WHAT IS CLAIMED IS: 

1 LA method of distributing cryptographic keys in a network comprising a 

2 server and a client, said method comprising: 

3 receiving a request for a key from a client; 

4 logging said request for said key in a log; 

5 distributing said key to said client in response to said request; 

6 multicasting program content for decryption by said client utilizing 

7 said key; 

8 billing said client based upon said log. 

1 2. The method as described in claim 1 and further comprising not 

2 monitoring whether said client requires said key prior to said receiving said request for said 

3 key. 

1 3. The method as described in claim 1 wherein said logging said request 

2 for said key comprises: 

3 logging a segment of said program content, wherein said key is used 

4 for decrypting said segment. 

1 4. The method as described in claim 1 wherein said key is encrypted 

2 under a program segment key and wherein said program segment key is distributed to said 

3 client in a multicast message. 

1 5. The method as described in claim 4 wherein said distributing said 

2 program segment key to said client comprises: 

3 distributing said program segment key as part of a unicast message. 

1 6. The method as described in claim 5 wherein said program segment key 

2 is encrypted under a unique key of said client. 
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1 7. The method as described in claim 4 wherein said distributing said 

2 program segment key to said client comprises: 

3 distributing said program segment key as part of a multicast message. 

1 8. The method as described in claim 7 wherein said program segment key 

2 is encrypted under a unique key of said client. 

1 9. The method as described in claim 4 wherein said client is a subscriber 

2 to a service and wherein said program segment key is encrypted under a service key. 

1 1 0. The method as described in claim 9 wherein said service key is 

2 distributed to said client in response to said user purchasing said service associated with said 

3 service key. 

1 11. The method as described in claim 1 0 wherein said service key is 

2 encrypted under a unique key of said client. 

1 12. The method as described in claim 1 and further comprising: 

2 distributing a next content key in a first message wherein said next 

3 content key is encrypted under a first program segment key; 

4 distributing said next content key in a second message wherein said 

5 next content key is encrypted under a second program segment key; 

6 wherein said next content key is operable for decrypting a subsequent 

7 segment of said program content. 

1 13. A method of distributing cryptographic keys in a multicasting network 

2 comprising a server and a client, said method comprising: 

3 receiving from a client a request for a first key; 

4 creating a list of clients that request said first key; 

5 distributing a multicast message to said list of clients that requested 

6 said first key so as to distribute a second key, wherein said second key is for use in 

7 decrypting encrypted program content. 
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1 14. The method as described in claim 13 wherein said second key is 

2 encrypted utilizing said first key for each of said clients on said list. 

1 15. The method as described in claim 14 wherein said first key is 

2 encrypted under a unique key. 

1 16. The method as described in claim 13 and further comprising: 

2 receiving a message from said client indicating that said client is 

3 leaving a multicast session. 

1 17. The method as described in claim 16 and further comprising: 

2 removing said client from said list. 

1 1 8. The method as described in claim 16 and further comprising: 

2 in response to said receiving said message from said client, logging an 

3 entry indicating that billing of said client should be stopped for said multicast session. 

1 19. The method as described in claim 1 7 and further comprising: 

2 distributing a third key to clients remaining on said list so as to prevent 

3 said client removed from said list from being able to decrypt a subsequent segment of 

4 program content encrypted under said third key. 

1 20. The method as described in claim 13 and further comprising: 

2 receiving a confirmation message from said client confirming that said 

3 client received said first key. 

1 21. The method as described in claim 1 3 and further comprising: 

2 removing said client from said list after a confirmation message is not 

3 received within a predetermined period of time after said first key is distributed. 

1 22. A method of distributing keys in a multicasting network comprising a 

2 server and a client, said method comprising: 
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3 multicasting encrypted program content; 

4 creating a list of active participants receiving said program, said list of 

5 active participants including said client; 

6 receiving a message from said client indicating that said client should 

7 remain on said list of active participants; 

8 multicasting a message to said list of active participants, said message 

9 including a new key for use in decrypting a subsequent segment of said program content. 

1 23. The method as described in claim 22 wherein said key is encrypted 

2 with a key unique to each of said participants listed in said list of participants. 

1 24. The method as described in claim 22 and further comprising: 

2 removing a second client from said list of active participants if a message 

3 indicating that said second client should be maintained on said second list of participants is 

4 not received from said second client. 

1 25. A method of transmitting a new encryption key in a network 

2 comprising a server and a client, said method comprising: 

3 providing a packet for use as an RTP packet comprising a payload 

4 portion and a header portion; 

5 inserting a field in said RTP packet operable to indicate key changes to 

6 said client so as to create a modified RTP packet; 

7 transmitting said modified RTP packet to said client. 

1 26. The method as described in claim 25 and further comprising: 

2 receiving said modified RTP packet at said client. 

1 27. The method as described in claim 25 and further comprising: 

2 removing said fixed field portion from said modified RTP packet so as to 

3 recover said RTP packet. 
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1 28. The method as described in claim 25 and further comprising: 

2 determining from said fixed field portion whether a key change 

3 occurred. 

1 29. A method of transmitting a new encryption key in a network 

2 comprising a server and a client, said method comprising: 

3 providing a packet for use as an RTP packet comprising a header 

4 portion; 

5 utilizing a padding bit in said header portion to indicate key changes to 

6 said client. 

1 30. A method of multicasting new encryption keys to a plurality of clients, 

2 said method comprising: 

3 providing a first key for use by a first client; 

4 encrypting said first key; 

5 providing a second key for use by a second client; 

6 encrypting said second key; 

7 combining said encrypted first key and said encrypted second key as 

8 part of a message; 

9 multicasting said message to said plurality of clients so as to allow said 
: 0 first client to obtain said encrypted first key and said second client to obtain said encrypted 

: 1 second key. 

1 31. The method as described in claim 30 wherein said combining 

2 comprises concatenating said encrypted first key and said encrypted second key in said 

3 message. 

1 32. The method as described in claim 30 wherein said first key and said 

2 second keys are program keys. 
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